8000 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on lo, link-type EN10MB (Ethernet), capture size 65535 bytes 15:04:30.853839 IP localhost.34814 > localhost.8000: Flags [S], seq 1999589484, win 32792, options [mss 16396,sackOK,TS val 501850893 ecr 0,nop,wscale 5], length 0 15:04:30.853848 IP localhost.8000 > localhost.34814: Flags [S.], seq 2619299683, ack 1999589485, win 32768, options [mss 16396,sackOK,TS val 501850893 ecr 501850893,nop,wscale 5], length 0 15:04:30.853855 IP localhost.34814 > localhost.8000: Flags [.], ack 1, win 1025, options [nop,nop,TS val 501850893 ecr 501850893], length 0 15:04:30.854268 IP localhost.34814 > localhost.8000: Flags [P.], seq 1:303, ack 1, win 1025, options [nop,nop,TS val 501850893 ecr 501850893], length 302 15:04:30.854291 IP localhost.8000 > localhost.34814: Flags [.], ack 303, win 1058, options [nop,nop,TS val 501850893 ecr 501850893], length 0 15:04:31.445265 IP localhost.8000 > localhost.34814: Flags [P.], seq 1:169, ack 303, win 1058, options [nop,nop,TS val 501850952 ecr 501850893], length 168 15:04:31.445285 IP localhost.34814 > localhost.8000: Flags [.], ack 169, win 1059, options [nop,nop,TS val 501850952 ecr 501850952], length 0 15:04:31.445443 IP localhost.8000 > localhost.34814: Flags [.], seq 169:16553, ack 303, win 1058, options [nop,nop,TS val 501850952 ecr 501850952], length 16384 15:04:31.445460 IP localhost.34814 > localhost.8000: Flags [.], ack 16553, win 1548, options [nop,nop,TS val 501850952 ecr 501850952], length 0 15:04:31.445480 IP localhost.8000 > localhost.34814: Flags [P.], seq 16553:32937, ack 303, win 1058, options [nop,nop,TS val 501850952 ecr 501850952], length 16384 Need to attribute packets to sockets/procs